Disable Registry and GPEdit.msc on a standard account

Hi, is there a way I can disable the registry access and GPEdit.msc on the standard account?

DustSailor said:

The standard account cannot access the registry* or group policy without admin permissions. You still want to disable them anyway?

*noticed I can delete (some) HKEY current user keys in registry with standard user, but not local machine... interesting

Group Policy remains inaccessible w/out Admin

Yes, I just noticed that as well while doing some trial and error.

I guess that is fine, no need of changes there.


Thank you for the support and quick reply.
+rep. :)

Concerning the registry. A standard user can only modify their own registry hive. They can only damage their own account. And if they do that you simply delete there account files and have them log back in and rebuild the profile.

No damage to the system or other users.

Nothing you need to be concerned about.